Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/2q-Yf-1ywLpoPPtez2vL40CKvp4.roa
File: 2q-Yf-1ywLpoPPtez2vL40CKvp4.roa (raw, json)
Hash identifier: wUQ1+XvG9z9IE1kPG3bBuPmu9PuZJQfDXR4gW79NGpQ=
Subject key identifier: DA:AF:98:7F:ED:72:C0:BA:68:3C:FB:5E:CF:6B:CB:E3:40:8A:BE:9E
Certificate issuer: /CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Certificate serial: 064A7248
Authority key identifier: C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/2q-Yf-1ywLpoPPtez2vL40CKvp4.roa
Signing time: Sat 01 Jan 2022 09:54:24 +0000
ROA not before: Sat 01 Jan 2022 09:54:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31713
IP address blocks: 217.113.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105542216 (0x64a7248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Validity
Not Before: Jan 1 09:54:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=daaf987fed72c0ba683cfb5ecf6bcbe3408abe9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1f:bf:a0:5a:f6:86:18:94:0c:2b:05:93:b7:
5f:18:26:09:c1:ec:47:a9:ef:23:4f:a0:d0:ee:56:
d6:96:8b:ec:4c:e3:17:bc:1a:77:ba:80:8d:d1:00:
4e:b5:f4:44:6f:31:81:ff:7f:16:1c:b8:01:6b:02:
34:b0:03:b3:46:40:d7:39:73:c7:95:e5:8b:70:cc:
38:b1:0e:7a:fe:2a:98:d5:59:30:02:19:4c:a7:e6:
f5:13:8d:2a:2e:df:af:6f:e3:45:52:99:db:88:70:
19:17:85:80:2d:7b:83:41:30:cd:19:7f:42:89:7e:
c5:4e:49:9d:7d:b7:dd:5c:16:5c:38:0c:f5:1a:ab:
60:87:63:d9:58:05:80:eb:94:f6:fa:03:95:8c:a9:
0f:0a:aa:ef:3c:b9:e1:f9:18:26:44:b1:17:e6:e2:
c4:27:b8:91:d5:e8:12:13:41:5e:1e:6c:3f:60:72:
b4:ac:bc:5a:37:5f:aa:72:76:62:7a:05:f5:6f:9d:
c8:0b:f3:5e:8f:89:f3:c9:39:13:2f:c4:94:45:bd:
24:f6:d4:5b:3e:47:24:a3:e4:1d:a0:ce:44:8f:6d:
cb:5b:78:33:e1:79:4c:a0:7d:a4:b2:23:ef:d2:2e:
72:64:cc:bd:01:e1:e1:93:af:54:3f:3b:48:b0:84:
a5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AF:98:7F:ED:72:C0:BA:68:3C:FB:5E:CF:6B:CB:E3:40:8A:BE:9E
X509v3 Authority Key Identifier:
keyid:C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/2q-Yf-1ywLpoPPtez2vL40CKvp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.92.0/24
Signature Algorithm: sha256WithRSAEncryption
62:fb:77:d9:14:4c:63:69:14:82:c0:5f:b9:9d:28:a4:7b:54:
7a:12:9a:ed:22:d3:4b:f4:f5:4e:4e:db:71:3d:aa:92:fb:bf:
47:26:2c:3e:63:05:59:bc:33:d1:e4:7a:0c:26:27:14:01:83:
04:e4:83:a1:76:f3:5c:10:20:bd:bf:cc:d8:2a:e8:c5:14:9a:
bd:fe:a6:b9:09:54:8a:bc:21:48:d4:a9:21:60:13:e9:ac:56:
96:b3:a6:93:70:73:3d:3b:e3:e6:bb:d5:5d:7d:cd:ee:f7:a2:
01:0c:33:d4:0c:63:cd:09:12:a2:f3:3d:b2:8d:5f:a8:69:1f:
01:09:bb:03:54:3d:ae:e6:6b:13:1a:1b:6c:c1:34:1a:c6:6c:
08:4f:49:1f:4d:1a:31:22:78:b7:56:c6:cc:fd:84:5d:d4:8b:
9a:94:5e:6d:e1:e0:77:9a:24:90:3d:77:9a:1a:93:07:d0:d2:
61:d6:f3:ef:02:72:20:c5:da:a1:53:ea:62:b9:9c:c1:3f:04:
74:9f:4d:c8:d5:15:48:29:b5:88:66:c6:e6:d7:de:e3:43:7d:
ac:9f:a5:fd:85:af:8d:c5:7c:0c:04:2c:a0:78:45:74:da:f2:
3e:36:0d:78:6d:44:ab:00:c1:34:58:ba:82:4b:71:02:ea:e7:
29:e6:2a:19
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBkpySDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ODUzMWFlMmNlNTdjOTVmNWEzOTg5MzBlYTQ1NTAzNTQyODAxYmExMB4XDTIyMDEw
MTA5NTQyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGFhZjk4N2ZlZDcy
YzBiYTY4M2NmYjVlY2Y2YmNiZTM0MDhhYmU5ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI4fv6Ba9oYYlAwrBZO3XxgmCcHsR6nvI0+g0O5W1paL7Ezj
F7wad7qAjdEATrX0RG8xgf9/Fhy4AWsCNLADs0ZA1zlzx5Xli3DMOLEOev4qmNVZ
MAIZTKfm9RONKi7fr2/jRVKZ24hwGReFgC17g0EwzRl/Qol+xU5JnX233VwWXDgM
9RqrYIdj2VgFgOuU9voDlYypDwqq7zy54fkYJkSxF+bixCe4kdXoEhNBXh5sP2By
tKy8WjdfqnJ2YnoF9W+dyAvzXo+J88k5Ey/ElEW9JPbUWz5HJKPkHaDORI9ty1t4
M+F5TKB9pLIj79IucmTMvQHh4ZOvVD87SLCEpcECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTar5h/7XLAumg8+17Pa8vjQIq+njAfBgNVHSMEGDAWgBTIUxrizlfJX1o5
iTDqRVA1QoAboTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lGTWE0czVYeVY5YU9Za3c2a1ZRTlVLQUc2RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWMvYzRjMzJjLTMyMmUtNGVkNy04YTI5LTQ1ZDU0MmQ1ZjU1Zi8x
LzJxLVlmLTF5d0xwb1BQdGV6MnZMNDBDS3ZwNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMv
YzRjMzJjLTMyMmUtNGVkNy04YTI5LTQ1ZDU0MmQ1ZjU1Zi8xL3lGTWE0czVYeVY5
YU9Za3c2a1ZRTlVLQUc2RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANlxXDANBgkqhkiG9w0BAQsFAAOC
AQEAYvt32RRMY2kUgsBfuZ0opHtUehKa7SLTS/T1Tk7bcT2qkvu/RyYsPmMFWbwz
0eR6DCYnFAGDBOSDoXbzXBAgvb/M2CroxRSavf6muQlUirwhSNSpIWAT6axWlrOm
k3BzPTvj5rvVXX3N7veiAQwz1AxjzQkSovM9so1fqGkfAQm7A1Q9ruZrExobbME0
GsZsCE9JH00aMSJ4t1bGzP2EXdSLmpRebeHgd5okkD13mhqTB9DSYdbz7wJyIMXa
oVPqYrmcwT8EdJ9NyNUVSCm1iGbG5tfe40N9rJ+l/YWvjcV8DAQsoHhFdNryPjYN
eG1EqwDBNFi6gktxAurnKeYqGQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:09 2024 by rpki-client on console-ams.rpki-client.org